I hope people realize that there is not really 77 million psn users. probably about 20 million of those users were dupe accounts for gran turismo 5 car duping and birthday gifting

, seriously psn hit all sorts of record users once gt5 was out for awhile and the whole gifting/duping/birthday glitches were common knowledge. And even at 50 million a ton of those are alt accounts for kids and family members many of which would most likely not have had any CC tied to those accounts.
Still the lack of information on what exactly was taken is disturbing. The fact that this person or persons was in their systems for several days before they knew something was going on, means that either the person/s that did this are really godly, that could get in roam around and cover their tracks so well, or that psn internal security was some degree of lackluster. Or a combo of the two things.
After the psn was taken down they were pretty quick to admit that an outside force had accessed their systems, but these guys were so good they had to call in external security firms to investigate the breach. And even with these outside firms help it seems they still do not know what all was accessed and obtained, just that stuff was accessed and obtained. Still the lag time was about 2 days between the time they shut down called people in investigated and then announced that stuff was taken, not wholly unreasonable, given that this entity was able to roam around for what appears to be a few days undetected before they even realized it.
So i guess your outlook can boil down to this this hacker or hackers are some of the worlds best and really deserve to hang but a hefty amount of respect in the same token. Or that sony's security is the joke of the internet. But it does seem that sony made every effort to inform people of what they knew as quickly as they could.